Design/EasySoft-ZenTaoPMS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 30 Wiki Activity

* Fix loophole.

Browse Source
This commit is contained in:
wangyidong
2023-08-18 15:02:07 +08:00
parent 6ebb01c61a
commit 8836f5c193
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
framework/base/router.class.php
+1 -1
View File
@@ -1062,7 +1062,7 @@ class baseRouter
$this->sessionID = isset($ztSessionHandler) ? $ztSessionHandler->getSessionID() : session_id();
if(isset($_GET[$this->config->sessionVar]))
if(isset($_GET[$this->config->sessionVar]) and preg_match('/^\w+$/', $_GET[$this->config->sessionVar])) // Check zentaosid only exist [0-9a-zA-Z_].
{
helper::restartSession($_GET[$this->config->sessionVar]);
}